CVE-2026-108458

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-100201

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

CVE-2026-103575

A Use after free vulnerability exists in the Remote Desktop Client , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact includes high confidentiality, integrity, and availability, u...

CVE-2026-100201

A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...

CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) is vulnerable to an information disclosure flaw (CWE-497). An authorized attacker can exploit this vulnerability to disclose sensitive information locally on the system. No specific exploit code or in-the-wild exploitation details are provided in t...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

EUVD-2026-100133

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-70250

A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...

CVE-2026-83789

A heap-based buffer overflow exists in the Windows SMB Client component. This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. While an official fix...

CVE-2026-83698

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...

CVE-2026-83677

A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...

CVE-2026-70012

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability's impact is categorized as HIGH for confidentiality, integrity, and availability. No specific exploitations or exploit links are provided in the documents....

CVE-2026-70004

A use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability has a high CVSS 3.1 base score of 7.5, indicating significant impact on confidentiality, integrity, and availability. No specific software versions, underl...

CVE-2026-69994

A use after free vulnerability exists in the Remote Desktop Client , which allows an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 7.5 (High) . No specific affected versions, root cause components, or exploit links are provided in the docume...

CVE-2026-69998

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High base severity (7.5) and requires user interaction. While specific component details or exploit links are not provided in the do...

CVE-2026-70006

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is Network and user interaction is Required . Exploitation details are not provided in th...

CVE-2026-69984

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. This issue has a HIGH base severity (CVSS 3.1 score of 7.5) and requires user interaction. No specific details regarding the affected component or version, nor any mention o...